diff --git a/sbin/devfs/devfs.conf b/sbin/devfs/devfs.conf
index d3430a2fe844..3e010259a280 100644
--- a/sbin/devfs/devfs.conf
+++ b/sbin/devfs/devfs.conf
@@ -40,3 +40,9 @@
 # Allow members of group operator to cat things to the speaker
 #own	speaker	root:operator
 #perm	speaker	0660
+
+# Allow members of group network to read from bpf devices.
+# In particular, this allows all group members to capture all
+# network traffic using tcpdump or wireshark.
+#own	bpf	root:network
+#perm	bpf	0640